---
typeId: req
recordId: benac-crypto-003
fields:
  title: Algorithm, profile, and identifier-class identifiers
  statement: Portable Benac records shall represent exact content identity as DASL
    CIDs rather than bare digest strings. DASL CIDs carry the content-identity
    version, content codec, hash algorithm, hash size, and digest. Signatures,
    encrypted objects, wrapped keys, key identifiers, authentication records,
    signed claim envelopes, and encryption envelopes shall still include
    explicit algorithm or profile identifiers sufficient for unambiguous
    interpretation. Structured Benac objects that are content-addressed or
    signed shall identify their Benac object type, schema/profile version, and
    required semantic context inside the logical payload encoded as DRISL. Signed and
    encrypted envelopes shall additionally identify their own envelope object
    type, algorithm profile, and cryptographic context.
  rationale: Algorithm agility and safe upgrades require unambiguous
    interpretation. CIDs identify exact content, while signatures, encryption
    envelopes, claims, and keys still require their own algorithm and profile
    identifiers.
  verification: Objects lacking required algorithm, profile, or identifier-class
    information are rejected. Portable records that use bare SHA-256 digest
    strings where DASL CIDs are required are rejected.
  testable: true
  status: draft
  area: BENAC-CRYPTO
  sourceDocument: /home/johnb/Downloads/benac_syrs_v0_4_integrated_authentication.md
  sourceVersion: v0.4
  sourceSections:
    - 10.1 Cryptographic identity, content identity, and provenance foundation
  order: 3
---
